Advisory Database
  • Advisories
  • Dependency Scanning
  1. composer
  2. ›
  3. typo3/cms
  4. ›
  5. GHSA-c7p6-3c9c-f88q

GHSA-c7p6-3c9c-f88q: Information Disclosure in TYPO3 CMS

June 5, 2024

HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint.

References

  • github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-09-05-3.yaml
  • github.com/TYPO3/typo3
  • github.com/advisories/GHSA-c7p6-3c9c-f88q
  • typo3.org/security/advisory/typo3-core-sa-2017-006

Code Behaviors & Features

Detect and mitigate GHSA-c7p6-3c9c-f88q with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions starting from 7.6.0 before 7.6.22, all versions starting from 8.0.0 before 8.7.5

Fixed versions

  • 7.6.22
  • 8.7.5

Solution

Upgrade to versions 7.6.22, 8.7.5 or above.

Impact 3.7 LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Learn more about CVSS

Source file

packagist/typo3/cms/GHSA-c7p6-3c9c-f88q.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:15:22 +0000.